Beveiligingsadvies

CVE-2024-3046

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-09 10:02:39

Laatst bijgewerkt 2024-08-22 19:59:23

Toegewezen door eclipse

CVSS-score 7.5

Status PUBLISHED

Beschrijving

In Eclipse Kura LogServlet component included in versions 5.0.0 to 5.4.1, a specifically crafted request to the servlet can allow an unauthenticated user to retrieve the device logs. Also, downloaded logs may be used by an attacker to perform privilege escalation by using the session id of an authenticated user reported in logs. This issue affects org.eclipse.kura:org.eclipse.kura.web2 version range [2.0.600, 2.4.0], which is included in Eclipse Kura version range [5.0.0, 5.4.1]

← Alle CVE's bekijken Bekijk op cve.org ↗